Subject Access Requests (Living Individuals)

Subject Access Requests (Living Individuals)

The UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 gives individuals the right to access their own information, while at the same time protecting this personal information from inappropriate use or disclosure.

Please note that the UK GDPR and Data Protection Act 2018 does not cover deceased individuals. Access to deceased records falls under the scope of the Access to Health Records NI Order 1993.

How do I access my personal information?

If the Trust holds personal information about you, you can request access to your information. This is known as a Subject Access Request.

There are a number of ways that you can make this request.

1. Download and complete a Subject Access Request Form and either email or post it to the Trust’s Information Governance Department.
   If you wish to receive this form by post or email, please phone 028 2766 1293 or email info.governance@northerntrust.hscni.net.
2. You can request information verbally by contacting the Information Governance Department or  the service directly.
3. Alternatively, we will providing access to an online form.  Details will be published soon.

Who can request access to my personal information?

A third party can request access to your personal information, for example, a solicitor, provided they have your written, signed consent.

What happens when we receive your request?

On receipt of your request, we may need to contact you to clarify the information you have requested or obtain the necessary supporting documentation so where possible, please provide an email address or contact telephone number.

Subject access requests are currently free of charge.

Under the UK GDPR we have 30 days to provide the information you have requested.  If the request is complex, we may have a further 60 days to respond if necessary, however we will advise you if this is the case.

If you are unhappy with any aspect of our response to your request, we would ask that you contact the Information Governance Department in the first instance.

You can also contact the Information Commissioners Office (ICO).

ICO Data Protection and Personal Information Complaints Tool

Information Commissioner’s Office
14 Cromac Place
Belfast
BT7 2JB
Email: ni@ico.org.uk